reopen 345518 = severity 345518 wishlist retitle 345518 do not default to saving password and include configuration option stop
On 02.01.06 14:21:30, Michael Biebl wrote: > This setting is for the subversion command client. Hmm, thought it would be authoritive for any program using libsvn0. Especially as the stored credentials are used by the command line client too. > password you can explicitly tell it if you want to store the password or > not and kdesvn does as so. Overlooked that small button. > I don't consider this behaviour a bug. I kind of do, because the default of kdesvn is to store passwords. Which IMHO is not what other debian packages do in terms of security. I mean, if somebody uses a subversion repository with authentication that is probably to increase security. Especially as passwords are stored in clear-text. > Maybe a global setting in the > configuration dialog would be useful so that kdesvn does not always > prompt you if you want to store the password or not and this setting > could be predefined with the value from .subversion/config if not > explictely set. But this is more a wishlist bug than an security > relevant bug. Agreed. I'd like to have the default for "store password" option to be off and maybe a possibility to remove the authentication information for the current opened repository, so one can switch from storing to not storing without fiddling with .subversion/auth/... files. Andreas -- You are as I am with You.
pgpBlyZfJuEKf.pgp
Description: PGP signature